Privacy policy

Privacy policy

LAST UPDATED · 2026-11-08READ TIME · 4 MINVERSION · 2.9

We keep this short on purpose. If you only read one thing: we collect what we need to issue your eSIM, we don't sell it, and you can delete your account from Profile or by emailing us. Where financial records must be retained, we anonymize your account details instead of deleting those records.

01

Who we are

Horizon eSIM ("Horizon", "we", "us") is a brand operated by LuShen L.L.C. (trade name LSHTech), a limited liability company registered in Kosovo, with its seat in Prishtina, under business registration number 812292598.

We provide travel data plans on eSIM profiles to consumers. This policy explains what data we collect, why we collect it, and what you can do about it.

02

What we collect

Account data: your email address, and (if you create an account) a hashed password and any profile fields you fill in.

Order data: the country/region/plan you purchase, the amount, the time of purchase, and the eSIM profile we issue you. This is necessary to deliver the service.

Payment data: payment processing happens at Paysera. We receive a transaction reference, last four digits of the card, and the brand — never the full card number, CVV, or PIN.

Usage data (on the eSIM itself): aggregated data volume, country of attach, and approximate session times. We use this to bill, to show you how much data you have left, and to detect fraud. We do not see the contents of your traffic.

Web data: cookies and similar tools to keep you logged in, remember preferences, and understand how the site is used unless you opt out. See the Cookies page.

Introductory-offer protection: we use verified phone details and offer history to prevent repeat claims across accounts. These records are not used for advertising.

03

Why we collect it

To deliver the eSIM you bought (contract, GDPR Art. 6(1)(b)).

To meet our legal duties — tax records, fraud reporting, lawful access requests (Art. 6(1)(c)).

To operate and improve the service — site analytics, error tracking, customer support (Art. 6(1)(f), legitimate interest).

To send you transactional email — receipts, install instructions, expiry warnings.

For marketing email, only when you opt in. You can opt out from any email we send you, instantly.

04

Who we share it with

Our eSIM connectivity partners — the mobile network providers that issue your eSIM profile and route your data traffic. They receive your email, the plan you bought, and (if you contact support through them) any details you share.

Paysera — our payment processor. They receive your card details directly; we never see them.

Brevo — our email service for offers, based in France. Only if you say yes to deals, it receives your email address, first name, language and a summary of your purchases (destination, date, number of orders) to send them to you.

Meta (WhatsApp) and sent.dm — our WhatsApp providers. If you message our support on WhatsApp, your phone number and our conversation pass through Meta's WhatsApp, directly or via sent.dm. If you ask for a WhatsApp code to sign in or confirm your number, sent.dm receives your phone number and the code to send it to you over WhatsApp.

Hosting and email infrastructure — based in the EU; standard data-processing agreements in place.

Authorities, when legally compelled. We publish a transparency report once a year.

We do not sell your data. When marketing tracking is enabled in your cookie preferences, we share website events, purchase values and advertising identifiers with OpenAI to measure our ads. OpenAI may also match conversions using customer details hashed in your browser. Turn marketing tracking off on the cookies page.

05

How long we keep it

Order data: 10 years, to meet statutory tax requirements.

Account profile and sign-in data: deleted when you delete your account if no legal retention applies; otherwise anonymized immediately and detached from your sign-in methods. Backup or operational traces may take up to 30 days to expire.

Usage data on the eSIM: 18 months in identifiable form, then aggregated.

Marketing consent records: until you withdraw consent, plus 3 years for proof.

Support tickets: 2 years after the last message.

Offer-limit records: we retain spent-offer records and phone hashes separately from your profile while needed to enforce the one-time allowance, including after account deletion. Contact support if you believe a claim was wrongly blocked.

06

Your rights

You can ask us to: show you what we hold on you, correct it, delete it, restrict how we use it, or export it in a portable format. You can delete your account in Profile → Danger zone, or email privacy@horizonesim.com. We respond within 30 days. Where law requires us to keep financial records, deletion means anonymizing account PII while retaining the required records.

You can also complain to your local data protection authority.

If we ever do anything that affects you significantly using automated decisions only, you have the right to human review. We don't currently make such decisions.

07

Cookies

We use cookies for three purposes: strictly necessary (login, cart), analytics (anonymous), and marketing (ad measurement). Analytics and marketing cookies are on by default.

You can switch analytics and marketing cookies off any time on our Cookies page. The choice is saved in your browser and applied immediately.

08

Contact

Email privacy@horizonesim.com for any privacy question. For everything else, support@horizonesim.com.

Questions? Email privacy@horizonesim.com. 24/7 human support in all languages, with guaranteed instant replies.